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Abstract. Let ^ ^ A,B C Z/pZ, where p is a prime. The 
Cauchy-Davenport theorem gives a lower bound for the number 
of distinct sums a + b, where a € A and b G B. The corresponding 
inverse theorem, due to Vosper, determines the structure of A and 
B if the lower bound is attained. A generalization of Vosper's the- 
orem was conjectured by Hamidoune, Serra, and Zemor in 2006. 
We prove that this conjecture is indeed correct. This is known to 
give a fairly good answer to the 3A: — 3 problem in Z/pZ. 

1. Introduction 

If nothing else is said, A and B will in this paper denote non-empty 
subsets of Z/pZ, where p is a rational prime. The Minkowski sum of 
A and B, or simply the sum-set A + B, is defined by 

A + B = {a + b\ a e A,b e B}. 

The Minkowski sum of more than two sets is defined in a similar way. 
In particular, we write 2 A for the sumset A + A. We write |y4| for the 
cardinality of the set A, while the complement of A in Z/pZ is denoted 
by A. We say that a subset of A is covered by A. 

The Cauchy-Davenport theorem gives a lower bound for the number 
of distinct residue classes in the Minkowski sum A + B. 

Theorem 1 (Cauchy-Davenport). If A + B ^ Z/pZ, we have 

\A + B\> \A\ + \B\ - 1. 

This is a basic result in additive combinatorial number theory. The 
theorem was proven by Cauchy [4J in 1813 and rediscovered by Daven- 
port P m in 1935. 
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In 1955 Freiman [IDl^IIS] introduced the term "inverse problem" 
in additive number theory, and proved some nice inverse theorems in 
Z. Soon after, Vosper [281 129] found and proved a substantial inverse 
theorem mod p. He determined the structure of the pairs A, B for 
which the Cauchy-Davenport theorem is valid with equality. 

If there exist a,d & Z/pZ such that 

A = {a + jd\j = 0,l,...,k-l}, 

then A is an arithmetic progression with common difference d. We 
do not distinguish between positive and negative common differences. 
The number of distinct elements in A is the length of the progression. 

The diameter diam(A) of A is the length of the shortest arithmetic 
progression which covers A. The set {xa + y \ a e A], where x 7^ and 
y are residue classes mod p, is an affine image of A. Now, the diameter 
diam(74) is the smallest positive integer d such that the interval [0, d—V\ 
contains some affine image of A. Therefore diam(74) is also called the 
affine diameter of A. The set A can be covered by a short arithmetic 
progression if diam(yl) < 12^41 — \A\ + 1. 

To A, B we make correspond the set 

(1) C = -(A + B), 
and we define r = r{A, B) by 

(2) r =\A + B\-\A\-\B\ + l. 

Application of the Cauchy-Davenport theorem to shows that r > 
if C 7^ 0; that is, if A + 5 7^ TLjpTj. The following theorem is a variant 
of the conjecture of Hamidoune, Serra, Zemor |T7]. 

Theorem 2. Let A and B be subsets of Z/plj, and assume that 

(3) \A\>r + 3, |5|>r + 3, |C| > r + 2. 

Then there are arithmetic progressions 21 3 A and ® D 5 covering A 
and B, such that the length of is |2l| = |y4| + r, the length of ^ is 
= \B\ + r, and the two arithmetic progressions 21 and have the 
same common difference. 

This theorem remains valid if we replace the conditions ([3]) by 

|y4|>r + 2, |fi|>r + 3, |C| > r + 3; 

that is, the conjecture of Hamidoune, Serra, and Zemor [17] is true. 

The case r = of Theorem [2] is essentially Vosper's theorem [281 
[29] . The case r = 1 is due to Hamidoune and R0dseth [16], while 
Hamidoune, Serra, and Zemor [17j worked their way through the case 
r = 2. 
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We prefer to use 'L/p'L as a background for conveying our ideas, as 
the background noise is then rather moderate. But of course, the ideas 
can be used in more general settings. We could replace the modulus p 
by an arbitrary positive integer, as in the Cauchy-Davenport-Chowla 
theorem [5]; cf. [25j. We could also consider A and B as subsets of a 
locally compact abelian group with a Haar measure; cf. [19] and [T5] . 

Let us take a brief look on the structure of this paper. In the next sec- 
tion we state our contribution to the 3 A; — 3 problem in "L/p'L. Then we 
show that the Dias da Silva-Hamidoune theorem, formerly the Erdos- 
Heilbronn conjecture, is a consequence of our 3fc — 3 result in L/pL. 
In Section H] we present the Davenport transform, which we use in the 
proof of Theorem |2l After a brief section on symmetry, we conclude 
with a few words about the 3A; — 3 problem in L/pL. 

2. The 3A; - 3 Problem in L/pL 

The following beautiful result, sometimes called Freiman's 2.4-theorem, 
was published by Freiman some 50 years ago. 

Theorem 3 (Freiman). let A C L/pL andk= \A\. If\2A\ < 2Ak-3 
and if k < p/35, then A can be covered by a short progression. 

It was shown in [23] that the condition k < p/35 can be replaced 
by the weaker k < p/10.7. By Theorem |2] it follows that we can use 
approximately k < p/2.8 instead. 

As we understand it, Freiman proved a stronger result; namely that 
there exists an absolute constant c such that if \2A\ < 3k — 3 and 
k < p/c, then A can be covered by a short progression. A simpler proof 
was given by Bilu, Lev, and Ruzsa |3]. Later, Green and Ruzsa [13] 
showed that Freiman's conjecture is true for c = 10^^°; cf. [TTf [27]. By 
Theorem [21 we see that c = 4 suffices, or more precisely, the conjecture 
is true if the condition k < p/c is replaced by k < p/A + 3/2. 

Theorem 4. Let ^ ^ A C L/pL. If \2A\ < 3k - 3 and k < p/A + 3/2, 
then A can be covered by a short arithmetic progression. 

3. Restricted Minkowski Sums 

Let us demonstrate the strength of Theorem [3] by deducing the Dias 
da Silva-Hamidoune theorem, formerly known as the Erdos-Heilbronn 
conjecture. 

Let A = {ao, ai, . . . , ak-i} C L/pL with k = \A\. Let s denote the 
number of distinct residue classes of the form + aj with i ^ j. Early 
in the 1960s Erdos and Heilbronn conjectured that 

(4) s > min{p,2A; - 3}. 
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Thirty years later, the truth of (jl]) was proven by Dias da Silva and 
Hamidoune [H], using multihnear algebra and representation theory; 
see also [8]. Soon after, Alon, Nathanson, and Ruzsa [H |2] came up 
with another proof, where they introduced the simple and beautiful 
"polynomial method". This method is also presented in pT]. 

To prove (jlj) we follow [22] and apply Theorem |H Form the k x k- 
matrix M = (oj + aj). Let t denote the number of distinct entries in 
M. Then t = \2A\. The number s equals the number of distinct entries 
outside the main diagonal. In particular we have 

s + k>t. 

If t > 3k — 3, then s > 2A; — 3. Therefore we only have to consider 
the case t < 3A; — 3. By Theorem IH if p > 4fc — 5, then diam(y4) < 
t — k + 1. Renumbering the Oj if necessary, each ai & A has an integer 
representative such that = ro < ri < . . . < Vk-i, where 

rfc^i = diam(y4) - l<t-k<2k-4:. 

Then the 2k — 3 integers 

ro + ri <ro + r2 < . . . < ro + r^-i 

<ri + rfe-i < r2 + r^-i < . . . < rk-2 + r^-i 

are distinct mod p, and we are finished. 

4. The Davenport Transform 

For the application of the Davenport transform, we use a technique 
which seems to go back to Vosper. This method was used by Yahya 
and myself to prove Theorem 5 in [T6]. It was also employed in [23] 
to give a short proof of Vosper's theorem. For a nice exposition of the 
Davenport transform, see Husbands |18j . 

Let 7^ A, 5 C Z/pZ such that A + B Z/pZ. Assume that Oe B 
and \B\ > 2. We define 

E = {A + 2B)r\ (ATB). 

Then we have 

A + 2B = {A + B)U E, 

where the union is disjoint. Since B generates Z/pZ additively, we 
have E 7^ 0. 

For e G -E, we define 

Be = Bn{e + C) and B' = B n{e + C). 

We refer to B^. as a Davenport transform of B. We have G -Be and 
BeUB^ = B, Be n B". 
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Furthermore, for an e G -E, there are a G A and 6, b' G B, such that 
e = a + b + b'. Hence, e — {a + b) = b' E B^. Thus we have B^ ^ 0; 
that is, 

(5) l<\Be\<\B\-l. 
Moreover, we also have 

(6) A + (A + 5e)U(e-5"). 

Here, the union is disjoint since we (in self-explanatory notation) have 
that if a + 6e = e — 6*^, then e — be = a + b'^ G A + B, so that b^ G 
i?e n -B"^ = 0, a contradiction. Hence, by ([6]), 

(7) \A + B\-\B\>\A + Be\-\Be\. 

Using ^ and ([7j), the Cauchy-Davenport theorem follows easily by 
induction on \B\. This was Davenport's goal. Let us add a few extra 
lines. 

Let us assume that B^ = {0} for all e G -E. Then B'^ = B^ for all 
eeE, where 5^ = 5 \ {0}. By ©, we have 

A + 5 D AU 

where the union is disjoint. The Cauchy-Davenport theorem gives us 

r + l>\E\ = \A + 2B\- \A + B\. 
Let us collect these results in a lemma. 
Lemma 1. If B^ = {0} for all e E E, then 

\B\<r + 2 if A + 2B^Z/pZ- 

|C| <r + l if A + 2B = Z/pZ. 

5. Vosper's Theorem 

Since we now have the necessary machinery lined up, it is not much 
work to prove Vosper's inverse theorem. But let us first write down a 
simple, but useful, lemma; cf. [26], p. 205]. 

Lemma 2. The subset A o/Z/pZ with \ A\ > 2, is an arithmetic pro- 
gression with common difference d ^ 0, if 

\{0,d} + A\ < l + \A\. 

Proof. An affine transformation shows that it is no restriction to set d = 
1. The result is clear if |A| > p—1. Suppose that \A\ < p — 2. Consider 
the residue classes 0, 1, ... ,p — 1 mod p as consecutive and equidistant 
points on the circle. Then we have exactly one element a E A with 
a + 1 ^ A. Hence, the elements of A form a set of consecutive points 

5 



on the circle; that is, A is an arithmetic progression with common 
difference 1. □ 

We now show Vosper's theorem. 

Theorem 5 (Vosper). Let A and B be subsets ofZ/pZ satisfying \B\ > 
2, |C| > 2. Ifr{A,B) = 0, then A is an arithmetic progression. 

Proof. We set r = 0, and assume that G -B. For \B\ = 2, we have 

\A + B\ = \A\ + 1, 

and by Lemma A is an arithmetic progression. 

Assume that the result is false for some B with \B\ > 2 minimal. 
Then \B\ > 3. By the minimality of \B\, we have B^ = {0}. Hence 
Be = {0} for any e G -E. Then we also have B'^ = B^ . This holds for 
all eeE. 

Moreover, we have 

A + B ^ AU{e- B"") for any e G ^, 
where the union is disjoint. Thus we have 

A + B D AU{E - B""), 

so that 

\A\ + \B\-1 = \A + B\> \A\ + \B\ ~2+\E\, 

and we get = 1. In combination with the assumptions \B\ > 2 
and \C\ > 2, this gives \B\ = 2. Now, Lemma [2] shows that A is an 
arithmetic progression. □ 

6. Proof of Theorem [2] 

In this section we prove an auxiliary result, and show that this result 
has Theorem [2] as an easy consequence. 

Theorem 6. If \B\ > r + 3 and \C\ > r + 2, then 

diam(A) < \A\ + r, 
where r = r{A,B) is given by ([2]). 

Proof. By Vosper's theorem we have that Theorem holds for r = 0. 
Assume that Theorem [H] is false. Consider the least r for which there 
is a pair A, B with E B and \B\ > 2, such that 

(8) diam{A) > \A\ + r{A, B) + 1. 

Choose such a pair, where |-B| is minimal. By ([7]) and ([8]), we get 

diam(A) > \A\ + r{A, B^) + 1. 



Assume that \Be\ > 2. By the minimahty of r{A,B), we then have 
r{A, B) = r{A, B^). By the minimahty of \B\, we have a contradiction. 
Thus we have B^ = {0} for all e G E, and the theorem follows by 
Lemma [TJ □ 

We now prove Theorem [2j By Theorem [6l we only have to show 
that the two arithmetic progressions 21 and !B have the same common 
difference. We can assume that 

21 ={0,1,2,..., |A|+r-l}, 
^={0,b,2b,...,{\B\+r-l)b}. 

For any integer representative b in the interval 2<6<p — 2, we 
clearly have 

|2l+{0,6}| > 2+ |2l|. 

Hence, by Lemma [21 the common difference of 03 is 1. This means 
that the two arithmetic progressions 21 and ® have the same common 
difference. This concludes the proof of Theorem HJ 



7. Symmetry 

Let A, B, C be subsets of Z/pZ satisfying 

A + B + C = (Z/pZ)^ 

where {Z/pZ)^ denotes the set of non-zero residue classes mod p. Now, 
two of the sets A,B,C determine uniquely the third, as long as the 
Minkowski sum of the two sets is not equal to the whole of Z/pZ. 
This is easy to see: Let A and B be given. Put 

c = -(aTb) + x, 

where X is some unknown non-empty set of residue classes mod p. 
Then 

{Z/pZy = A + B + C + X = {ZjpZY + X, 

so that |X| = 1. It follows that X = {0}. If A and B are given, we thus 
have that C is uniquely determined as ([1]). The quantity r = r{A,B) 
is defined by ([2]). In fact, we have 

p + l-r= \A\ + \B\ + \C\, 

which shows that r is symmetric in A,B,C. 

We have already seen that if A and B are given, we get Theorem |2] 
as presented in the introduction. Now, if B and C are given, we get 
the theorem conjectured by Hamidoune, Serra, and Zemor. 
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8. Finis 



There is a conjecture saying that if p is large, then Theorem H] is vahd 
without any special upper bound on k. Seva Lev [20] has great expec- 
tations to a proof of this conjecture. He says: "A "true" combinatorial 
proof . . . may result in a real progress in additive combinatorial number 
theory." 
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